BugZero | Palo Alto Networks BugID PAN-231507 - (PA-1400 Series firewalls only) Fixed an issue whe...

OPERATIONAL DEFECT DATABASE

...

BugZero | Palo Alto Networks BugID PAN-231507 - (PA-1400 Series firewalls only) Fixed an issue whe...

Palo Alto Networks - Defect ID: PAN-231507

(PA-1400 Series firewalls only) Fixed an issue where, when an HSCI interface was used as an HA2 interface, HA2 packets were intermittently dropped on the passive firewall, which caused the HA2 connection to flap due to missing HA2 keepalive messages.

Palo Alto Networks - Defect ID: PAN-231507

(PA-1400 Series firewalls only) Fixed an issue where, when an HSCI interface was used as an HA2 interface, HA2 packets were intermittently dropped on the passive firewall, which caused the HA2 connection to flap due to missing HA2 keepalive messages.

Last updated on August 6th, 2025

BugZero Risk Score
9.3 High

Overall: 9.3

Severity: 10.0

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

Overview

(PA-1400 Series firewalls only) Fixed an issue where, when an HSCI interface was used as an HA2 interface, HA2 packets were intermittently dropped on the passive firewall, which caused the HA2 connection to flap due to missing HA2 keepalive messages.

Impact

HA2 flaprealtime sync delay

root_cause

When HSCI interface is used as HA2 interface, HA2 packets were not processed properly.

workaround

Use Data interface for HA2

Change history

No changes to display

2025-07-22 Added: 11.0.2, 11.0.3

Top Palo Alto Networks Defects

6.3Defect ID: PAN-289383
( PA-800 series firewalls only ) Upgrading firewalls to PAN-OS 11.0 or later causes SFP ports to go non-operational when the firewall uses forced port mode and the connected peer device operates without auto-negotiation. Workaround: Enable auto-negotiation on the connected peer firewall.
6.3Defect ID: PAN-271438
Fixed an issue where the firewall calculated available memory incorrectly on CENTOS devices, which caused the firewall to display high memory usage alerts even when sufficient memory was available.
6.3Defect ID: PAN-281776
Fixed an issue on the Panorama web interface where the error message PPPoEv6 Client Interface cannot be enabled with DHCPv6 client was generated when overriding aggregate interfaces even when no DHCPv6 or PPPoE was configured.
6.3Defect ID: PAN-260661
Fixed an issue where daily email reports generated from the custom report did not display the report details in PDF or CSV files.
6.3Defect ID: PAN-294179
On the page, some commit versions might display incorrect or missing data. Fields such as, , , and might not be visible for some commit versions. Sometimes, commit versions can disappear after a refresh and the commit description field might display corrupted characters.

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Palo Alto Networks - Defect ID: PAN-231507

(PA-1400 Series firewalls only) Fixed an issue where, when an HSCI interface was used as an HA2 interface, HA2 packets were intermittently dropped on the passive firewall, which caused the HA2 connection to flap due to missing HA2 keepalive messages.

Palo Alto Networks - Defect ID: PAN-231507

(PA-1400 Series firewalls only) Fixed an issue where, when an HSCI interface was used as an HA2 interface, HA2 packets were intermittently dropped on the passive firewall, which caused the HA2 connection to flap due to missing HA2 keepalive messages.

Last updated on August 6th, 2025

BugZero Risk Score9.3 High

Bug Details

Overview

Impact

root_cause

workaround

Links

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
9.3 High